ash-project usage rules vulnerabilities

Latest ash-project usage rules CVEs

Newest publication first

1. CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

   Published 2026-09-08

   Low·CVSS 2.3 EPSS 0.66%

   Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject terminal control sequences into the output of mix usage_rules.search_docs. mix usage_rules.search_docs searches Hex documentation...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.